$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583.cer File: aa9d650e-309d-4772-a1ee-ed762e147583.cer (raw, json) Hash identifier: zuttlxn4HF+EsICLxPCJTXEW/p7YIQrzuRa6ylD9hwM= Subject key identifier: 7A:77:02:87:F0:CD:88:51:31:68:DA:6A:E2:D0:F5:72:58:4E:3A:AC Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F432858499DB794E1DDF6422BEEE4AB40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/aa9d650e-309d-4772-a1ee-ed762e147583.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 23 Apr 2025 00:45:37 +0000 Certificate not after: Tue 27 Jul 2027 00:45:37 +0000 Subordinate resources: AS: 17268 AS: 26791 AS: 27269 AS: 394027 AS: 397635 AS: 397868 AS: 397875 IP: 149.117.0.0/16 IP: 162.223.124.0/24 IP: 162.244.4.0/23 IP: 192.42.240.0/24 IP: 192.231.134.0/24 IP: 198.182.32.0/19 IP: 2620:121:e000::/44 IP: 2620:12d:e000::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9d:b7:94:e1:dd:f6:42:2b:ee:e4:ab:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Apr 23 00:45:37 2025 GMT Not After : Jul 27 00:45:37 2027 GMT Subject: CN=aa9d650e-309d-4772-a1ee-ed762e147583 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:fb:b2:5e:21:2b:fc:72:3e:d9:78:e9:a9:81: 23:c3:c8:06:54:67:36:6e:fb:75:08:cb:38:ad:13: 5b:68:a1:d3:47:47:f0:0f:e5:2e:fb:a9:72:90:ec: c2:af:e8:e2:2e:e9:dc:a3:7b:83:da:1f:24:f6:2c: 44:bd:e9:53:96:d2:d3:0d:2e:3b:d5:14:21:73:7a: 20:e9:72:ac:ae:4a:87:f5:94:dd:ed:ca:31:98:fa: 41:0c:8b:f7:59:09:dc:51:0e:65:c4:df:79:dd:28: a5:e8:79:18:9a:9b:cd:c0:c6:2d:6a:aa:4b:d7:d6: 23:3e:c1:2e:bb:f8:8e:3d:95:27:14:82:8a:2f:bc: 5c:3b:28:ee:a6:70:76:87:68:c3:92:2a:d5:8b:17: 81:ef:66:16:38:53:c6:44:31:ad:a6:23:0d:7b:c7: c8:45:2d:01:40:83:0a:36:dc:b1:e6:fc:02:45:25: 3b:bc:13:fc:4a:a6:92:ba:db:96:e8:d2:a2:f4:07: 40:0a:7d:47:a9:e3:04:e3:78:04:62:07:bf:97:3d: da:c0:31:5d:95:21:3b:3e:0b:92:67:da:c4:f3:7e: 1a:73:49:d9:94:a2:2a:7e:d5:54:7b:96:aa:1f:d2: 8f:4f:83:bc:98:ce:8e:e2:ef:90:a2:77:69:18:66: 30:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:77:02:87:F0:CD:88:51:31:68:DA:6A:E2:D0:F5:72:58:4E:3A:AC Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/aa9d650e-309d-4772-a1ee-ed762e147583.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 149.117.0.0/16 162.223.124.0/24 162.244.4.0/23 192.42.240.0/24 192.231.134.0/24 198.182.32.0/19 IPv6: 2620:121:e000::/44 2620:12d:e000::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 17268 26791 27269 394027 397635 397868 397875 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:74:3b:e2:54:fe:28:6f:61:01:76:db:d6:05:ad:72:b0:d3: e0:46:33:d9:93:82:a0:c8:d2:5f:1f:7d:ab:99:45:97:03:a9: e0:9d:f6:46:0f:4a:f2:23:60:76:18:f9:b8:c6:17:e6:48:a1: df:00:d4:be:32:ce:43:cd:b8:46:10:2e:c4:71:14:f7:e9:b9: f5:06:8f:82:2d:66:1e:db:ae:97:48:08:23:c2:74:de:34:71: 78:40:e7:72:4d:25:34:54:58:e4:03:8d:19:b4:33:2a:71:d5: c9:e1:79:a0:f9:be:b7:f1:cd:61:7c:0a:3c:71:1f:34:e6:c7: 13:e7:3e:68:64:0a:cd:93:16:8d:ae:d8:61:8d:f7:77:32:93: 01:bd:22:d9:20:b6:1e:78:7b:f0:11:22:e7:12:ad:56:81:cd: b7:18:e9:36:0c:27:b4:23:81:a0:b8:23:63:b7:ee:bc:8a:a1: 8b:db:57:f5:c9:9d:9f:f1:d5:6a:0d:5d:58:ed:e2:57:58:37: cd:23:8b:79:4c:4a:98:6b:24:1f:92:35:1a:c6:a3:0f:a4:17: 43:ca:1f:d5:cc:a8:24:db:2b:68:66:da:c7:cb:e7:8a:d7:40: dc:e4:d8:3b:38:10:78:ae:4a:10:82:7e:da:76:4c:26:96:c1: 30:e4:5b:0a -----BEGIN CERTIFICATE----- MIIHWjCCBkKgAwIBAgIUAQ0Mn0MoWEmdt5Th3fZCK+7kq0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDQyMzAwNDUzN1oXDTI3MDcyNzAwNDUzN1owLzEtMCsGA1UEAxMk YWE5ZDY1MGUtMzA5ZC00NzcyLWExZWUtZWQ3NjJlMTQ3NTgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPuyXiEr/HI+2XjpqYEjw8gGVGc2bvt1CMs4 rRNbaKHTR0fwD+Uu+6lykOzCr+jiLunco3uD2h8k9ixEvelTltLTDS471RQhc3og 6XKsrkqH9ZTd7coxmPpBDIv3WQncUQ5lxN953Sil6HkYmpvNwMYtaqpL19YjPsEu u/iOPZUnFIKKL7xcOyjupnB2h2jDkirVixeB72YWOFPGRDGtpiMNe8fIRS0BQIMK Ntyx5vwCRSU7vBP8SqaSutuW6NKi9AdACn1HqeME43gEYge/lz3awDFdlSE7PguS Z9rE834ac0nZlKIqftVUe5aqH9KPT4O8mM6O4u+QondpGGYwawIDAQABo4IEbDCC BGgwHQYDVR0OBBYEFHp3AofwzYhRMWjaauLQ9XJYTjqsMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9h YTlkNjUwZS0zMDlkLTQ3NzItYTFlZS1lZDc2MmUxNDc1ODMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkL2FhOWQ2NTBlLTMwOWQtNDc3Mi1h MWVlLWVkNzYyZTE0NzU4My9hYTlkNjUwZS0zMDlkLTQ3NzItYTFlZS1lZDc2MmUx NDc1ODMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwVQYIKwYBBQUH AQcBAf8ERjBEMCkEAgABMCMDAwCVdQMEAKLffAMEAaL0BAMEAMAq8AMEAMDnhgME Bca2IDAXBAIAAjARAwcEJiABIeAAAwYAJiABLeAwNQYIKwYBBQUHAQgBAf8EJjAk oCIwIAICQ3QCAminAgJqhQIDBgMrAgMGEUMCAwYSLAIDBhIzMFQGA1UdIAEB/wRK MEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5u ZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAIp0 O+JU/ihvYQF229YFrXKw0+BGM9mTgqDI0l8ffauZRZcDqeCd9kYPSvIjYHYY+bjG F+ZIod8A1L4yzkPNuEYQLsRxFPfpufUGj4ItZh7brpdICCPCdN40cXhA53JNJTRU WOQDjRm0Mypx1cnheaD5vrfxzWF8CjxxHzTmxxPnPmhkCs2TFo2u2GGN93cykwG9 Itkgth54e/ARIucSrVaBzbcY6TYMJ7QjgaC4I2O37ryKoYvbV/XJnZ/x1WoNXVjt 4ldYN80ji3lMSphrJB+SNRrGow+kF0PKH9XMqCTbK2hm2sfL54rXQNzk2Ds4EHiu ShCCftp2TCaWwTDkWwo= -----END CERTIFICATE-----Generated at Tue Nov 4 21:24:43 2025 by rpki-client